Technote (troubleshooting)
Problem(Abstract)
Only when PingTimeout parameter is set in conf file of Log File Agent, the event cannot be sent to EIF probe.
Symptom
The event is written to cache file of Log File Agent, but the event is not sent to EIF probe though ping command is successful from the system of Log File Agent to the system of EIF probe in command line.
Cause
When PingTimeout parameter is set for Log File Agent, the agent tries to get ICMP protocol information with getprotobyname function.
If ICMP entry is not in \windows\system32\drivers\etc\protocol (in case of Unix, /etc/protocol), Log File Agent fails to get ICMP information and does not try to connect to EIF probe.
Diagnosing the problem
Set the following trace in Log File Agent.
KEF_DEBUG=M
When the issue occurs, the following message is logged.
(5110B534.00AF-1C7C:eipc.c,1726,"ed_ping") Error - icmp unknown protocol
Resolving the problem
Please add ICMP entry in \windows\system32\drivers\etc\protocol.
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.